Demonstration of automatic verification, interactive challenge,
and verification failure experiences using Cloudflare Turnstile
testing sitekeys.
Production Behaviour Disclaimer
This page uses Cloudflare's documented Turnstile testing
sitekeys. These keys intentionally generate predetermined
outcomes for development, testing, and educational purposes.
Humane Verification v9 (HV9) may report trusted status,
dynamic trust scores, proof-of-work completion, and
Private Access Token (PAT) availability. However, final
verification decisions remain under the control of the
destination website, Cloudflare configuration, and
other security systems that participate in the request.
The examples below demonstrate three common experiences:
automatic verification, an interactive challenge, and
verification failure. These examples should be viewed as
production-like outcomes rather than indicators of a
specific PAT state.
An interactive challenge does not automatically mean that
a PAT failed. Likewise, a verification failure does not
automatically indicate bot activity. Verification
outcomes can be influenced by many factors, including
service configuration, risk policies, availability of
trust signals, implementation details, and other
environmental conditions.
This demo illustrates user experiences only and should
not be interpreted as definitive proof that a particular
PAT was issued, accepted, rejected, ignored, consumed,
or otherwise acted upon by Cloudflare or any specific
website.
✅ Automatic Verification Experience
Test sitekey:
1x00000000000000000000AA
Production-Like Outcome: Automatic Verification
This widget uses Cloudflare's "always passes"
testing sitekey to demonstrate a frictionless
verification experience.
Users running HV9 with a verified state and strong
trust indicators may encounter experiences similar
to this on services that honour compatible trust
signals. The final decision remains under the
control of the destination service.
⚠️ Interactive Challenge Experience
Test sitekey:
3x00000000000000000000FF
Production-Like Outcome: Additional Verification Requested
This widget uses Cloudflare's forced interactive
challenge testing sitekey to demonstrate a scenario
where additional user verification is requested.
Important:
This outcome is intentionally forced by the testing
key. In production, an interactive challenge may be
presented even when Turnstile eventually determines
the visitor is legitimate and even when HV9 reports
a successful PAT and a high trust score. The
appearance of a challenge alone should not be
interpreted as evidence that a PAT failed.
❌ Verification Failure Experience
Test sitekey:
2x00000000000000000000AB
Production-Like Outcome: Verification Not Accepted
This widget uses Cloudflare's documented "always
fails" testing sitekey to demonstrate a
verification-failure experience.
Important:
This outcome is intentionally forced by the testing
key and does not represent a real production risk
assessment. Verification can fail for a variety of
reasons and should not automatically be interpreted
as evidence of bot activity, an invalid PAT, or a
failed HV9 trust assessment. This demonstration is
included solely to show what a verification failure
experience may look like.